Side-Channel Analysis of Multiplications in GF(2 128 ) Application to AES-GCM - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

Side-Channel Analysis of Multiplications in GF(2 128 ) Application to AES-GCM

Analyse par canaux auxiliaires de la multiplication dans GF(2^128) - Application à AES-GCM

Sonia Belaïd
  • Function : Author
  • PersonId : 1037825
Pierre-Alain Fouque
  • Function : Author
  • PersonId : 962290


In this paper, we study the side-channel security of the field multiplication in GF(2^n). We particularly focus on GF(2^{128}) multiplication which is the one used in the authentication part of AES-GCM but the proposed attack also applies to other binary extensions. In a hard-ware implementation using a 128-bit multiplier, the full 128-bit secret is manipulated at once. In this context, classical DPA attacks based on the divide and conquer strategy cannot be applied. In this work, the algebraic structure of the multiplication is leveraged to recover bits of information about the secret multiplicand without having to perform any key-guess. To do so, the leakage corresponding to the writing of the multiplication output into a register is considered. It is assumed to follow a Hamming weight/distance leakage model. Under these particular, yet easily met, assumption we exhibit a nice connection between the key recovery problem and some classical coding and Learning Parities with Noise problems with certain instance parameters. In our case, the noise is very high, but the length of the secret is rather short. In this work we investigate different solving techniques corresponding to different attacker models and eventually refine the attack when considering particular implementations of the multiplication.
Fichier principal
Vignette du fichier
article.pdf (455.74 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01093987 , version 1 (11-12-2014)


  • HAL Id : hal-01093987 , version 1


Sonia Belaïd, Pierre-Alain Fouque, Benoit Gérard. Side-Channel Analysis of Multiplications in GF(2 128 ) Application to AES-GCM. Advances in Cryptology - ASIACRYPT 2014 - 20th International Conference on the Theory and Application of Cryptology and Information Security, Palash Sarkar, Tetsu Iwata, Dec 2014, Kaoshiung, Taiwan. pp.20. ⟨hal-01093987⟩
261 View
1245 Download


Gmail Facebook X LinkedIn More